The identification, analysis, assessment, control and monitoring of risks, and in particular of risks that may jeopardize the company's existence, are core tasks of management. To this end, the organization's overarching objectives, strategies and policies for risk management must be defined. In addition to defining the methods for identifying and assessing risks, this includes determining risk-bearing capacity and appetite, defining responsibilities in relation to risk management, allocating resources to avert damage if a risk materializes, and communicating internally and externally about the identified risks (in particular reporting in the annual management report). In addition, the creation and maintenance of an appropriate risk culture in the company is also considered an important aspect of functioning risk management and should therefore not be underestimated. Appropriate risk management supports management in identifying risks at an early stage and counteracting them appropriately so that damage to the company can be averted.
Various (international) standards can serve as a basis for designing and also optimizing a risk management system in order to ensure its appropriateness. Risk management and the early risk detection system (especially for stock corporations) are based on the requirements of the German Control and Transparency Act (KonTraG) and the new version of IDW auditing standard PS 340 from 2020, which is based on this. According to this new version, the topics of risk-bearing capacity and risk aggregation in particular must be included in risk management.
Our services in the area of risk management systems are particularly relevant for you in the following situations:
Repeated occurrence of risks with, in some cases, considerable damage that could have been prevented if they had been identified at an early stage
Outdated structures in risk management
Capacity bottlenecks in operational implementation
Own requirements or consideration of significant stakeholder requirements resulting in the need to establish a risk management system in principle
Change of legal form, e.g. to an AG, or of shareholder structure (entry of private equity investors, IPO)
Rapid company growth and thus also increasing risks that risks are neglected due to the momentum
Our services in the area of risk management systems include in particular:
Design and implementation of risk management systems or individual components as part of optimization efforts,
Review of your risk management system with regard to adequacy and effectiveness as well as compliance with regulatory requirements, e.g. to cover the new requirements from IDW PS 340 n.F. (in particular development of a risk-bearing capacity concept and implementation of risk aggregation),
Structured identification of risks for your company based on proven techniques,
Analysis and evaluation of identified risks with regard to their probability of occurrence and possible extent of damage on the basis of a uniform and systematic methodology, plus risk records to document all processes that take place in connection with risk analysis and assessment,
Review your risk management system for compliance with ESG requirements, e.g. to map environmental risks and opportunities or TCFD requirements,
Developing measures to manage or control risks, in particular to reduce the potential extent of damage and the probability of occurrence or to make their consequences manageable, and tracking the effective implementation of the measures,
Design and implementation of risk monitoring measures using parameters that provide information about current risks (risk indicators),
Optimization/updating of the existing risk management system
Active operational support, for example in the evaluation and assessment of risks
Support in the selection and implementation of relevant IT tools.
If you are interested and have any questions, please do not hesitate to contact us.
Your contact to us
Do you have any questions about our services or WTS Advisory? We look forward to your message or your call!